To provide our DM automation services, we collect and process certain types of information. We only collect what is strictly necessary to perform our services.
Account and Registration Data: When you sign up for Sendlink app, we collect your name, email address, and billing information.
Social Media Profile Data: To connect your social media accounts (e.g., Instagram, Facebook, LinkedIn, TikTok), we receive authorization tokens and public profile information (such as your username, page ID, and profile picture). We do not collect or store your social media passwords.
End-User Interaction Data: When your followers interact with your connected accounts (e.g., by commenting a specific keyword like "link" or sending a direct message), we process:
The commenter/sender’s public username and social media ID.
The content of the specific comment or message that triggers the automation.
Timestamps of the interaction to ensure compliance with platform rate limits and messaging windows (such as Meta's 24-hour messaging rule).
Usage and Technical Data: We collect analytics on how you use our Service, such as feature usage, crash reports, IP addresses, and device information to maintain and improve our app.
We use the collected information exclusively to provide and improve the Sendlink app experience. Specifically, we use data to:
Execute Automations: Detect trigger keywords in comments or DMs and automatically dispatch the designated link or response on your behalf.
Ensure Platform Compliance: Monitor message volumes and timestamp limits to ensure your automations comply with third-party platform rules (e.g., preventing spam and respecting API rate limits).
Customer Support: Communicate with you regarding your account, troubleshoot technical issues, and provide customer service.
Service Improvement: Analyze aggregated, non-personally identifiable usage metrics to enhance our features.
Sendlink app operates using official, approved APIs provided by social media networks (such as the Meta Graph API). Our use of data retrieved from these platforms is strictly governed by their respective Developer Terms and Policies.
Social Media Platforms (e.g., Meta): We share data back to platforms like Instagram and Facebook solely to deliver the automated DMs you configure.
Service Providers: We may share data with trusted third-party vendors who assist us in operating our infrastructure (e.g., cloud hosting providers like AWS/Google Cloud, payment processors like Stripe). These providers are bound by Data Processing Agreements (DPAs) and cannot use your data for any other purpose.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
We do not sell, rent, or trade your personal data or your followers' data to third parties for marketing purposes.
Security: We implement industry-standard encryption (HTTPS/TLS) to protect data in transit and encrypt stored data at rest to prevent unauthorized access.
Data Minimization: We only process the specific comments or DMs that trigger your defined automations. We do not scrape, ingest, or store your entire account's chat history or unrelated comments.
Retention: We retain interaction data only for as long as necessary to execute the automation, provide you with analytics, and comply with platform API rules. Generally, end-user interaction logs are automatically anonymized or deleted after [e.g., 30 to 90 days].
Depending on your jurisdiction, you and your end-users have specific rights regarding personal data:
Right to Access and Portability: You can request a copy of the personal data we hold about you.
Right to Rectification: You can correct inaccurate or incomplete data.
Right to Erasure (Data Deletion): You can request that we delete your personal data.
For Sendlink app Users: You can delete your account and revoke our access to your social media platforms at any time via your account settings. Upon account deletion, we will purge your data from our active systems within 30 days.
For Social Media End-Users: If a user who interacted with your connected account wishes to have their interaction data deleted from our logs, they or you may contact us, and we will fulfill the deletion request within 30 days.
Revoking API Access: You can instantly revoke Sendlink app’s access to your social media accounts by navigating to the "Business Integrations" or "Security" settings natively within your Instagram, Facebook, or other social media accounts and removing our app.
Sendlink app is intended for use by businesses, creators, and individuals over the age of 18. We do not knowingly collect personal information from children under the age of 13. If we discover that we have processed data from a child, we will delete it immediately.
We may update our Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements (including updates to third-party platform API terms). We will notify you of any material changes by sending an email to the address associated with your account or by posting a prominent notice within the app.